Lucene search

K
oraclelinuxOracleELSA-2014-1893
HistoryNov 24, 2014 - 12:00 a.m.

libXfont security update

2014-11-2400:00:00
Oracle
linux.oracle.com
17

0.025 Low

EPSS

Percentile

89.0%

[1.2.2-1.0.6]

  • CVE-2014-0209: integer overflow of allocations in font metadata file parsing (bug 1163602, bug 1163601)
  • CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies (bug 1163602, bug 1163601)
  • CVE-2014-0211: integer overflows calculating memory needs for xfs replies (bug 1163602, bug 1163601)